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Response to Amendment 

Claims 5, 16-41, 46, and 61 have been cancelled. Applicant's arguments/amendments 
with respect to amended claims 1, 42, & 57, previously presented claims 2-4, 6-15, 43-45, 47-56, 
58-60, & 62-71, and newly presented claims 72-74 filed 10/26/2006 have been fully considered 
and therefore the claims are rejected under new grounds. The Examiner would like to point out 
that this action is made final (See MPEP 706.07a). 

Claim Rejections - 35 USC §103 

I. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set forth in 
section 102 of this title, if the differences between the subject matter sought to be patented and the prior art are 
such that the subject matter as a whole would have been obvious at the time the invention was made to a person 
having ordinary skill in the art to which said subject matter pertains. Patentability shall not be negatived by the 
manner in which the invention was made. 

II. Claims 1, 4, 6-7, 1.1-12, 14-15, 42, 45, 47-48, 52-53, 55-56, 57, 60, 62-63, 67-68, and 70- 
74 are rejected under 35 U.S.C. 103(a) as being unpatentable over Tso et al., US Patent No. 
6,088,803, and further in view of Takahashi et al., European Patent App. No. 903901 A2. 

As per claims 1 , 42, and 57: 

Tso et al. substantially teach the method, system, and machine-readable medium for 
receiving a user request for an object maintained at a server (col. 2, lines 62-66); upon a request 
from the server, performing an operation on an object at a cluster device, said cluster device 
being a separate device from the server, said operation including accessing said object at said 
server and determining a result of processing said object at said cluster device (col. 2, line 66 - 
col. 3, line 5); and conditionally allowing access to said object in response to said user request 
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based on said result (col. 3, lines 5-10). Furthermore, Tso et al. teach that there may be multiple 
cluster devices, where the cluster device has already been established as being a separate device 
from the server (col. 8, lines 50-62). 

Not explicitly disclosed is selecting a cluster device from a plurality of cluster devices to 
perform an operation on the object according to a classification of the plurality of cluster devices 
based on performance criterion. However, Takahashi et al. teach a load-balancing scheme where 
the load is measured between a hardware device and each server. Once the number of 
connections/response time per connection currently managed by the server is assessed, the load 
condition is used to determine how to distribute incoming service requests (par. 5, technique (b)). 
Therefore, it would have been obvious to a person in the art at the time the invention was made 
to modify the method disclosed in Tso et al. to select a cluster device out of a plurality of cluster 
devices with the lowest current load condition assessed for performing an operation on the 
object. This modification would have been obvious because a person having ordinary skill in the 
art, at the time the invention was made, would have been motivated to do so since Takahashi et 
al. suggest that a load-balancing scheme is necessary in order to maintain stability, as well as a 
lower response time to service requests, within a network in par. 4. 
As per claims 4, 45, and 60: 

Tso et al. and Takahashi et al. substantially teach the method, system, and machine- 
readable medium of claims 1, 42, and 57. Furthermore, Tso et al. teach persistently recording 
said result of said operation in association with said object (col. 5, lines 1-4). 
As per claims 6, 47, and 62: 
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Tso et al. and Takahashi et al. substantially teach the method, system, and machine- 
readable medium of claims 1, 42, and 57. Furthermore, Tso et al. teach wherein said operation 
includes a plurality of processes, each one process being performed at a separate cluster device 
(col. 5, lines 1-4). 
As per claims 7, 48, and 63: 

Tso et al. and Takahashi et al. substantially teach the method, system, and machine- 
readable medium of claims 1, 42, and 57. Furthermore, Tso et al. teach wherein said operation 
includes at least one of: virus scanning, encryption or decryption, compression or decompression 
(col. 3, lines 2-5). 
As per claim 11: 

Tso et al. and Takahashi et al. substantially teach the method of claim 1. Furthermore, 
Tso et al. teach at a first time, recording said result of said operation for said object; and at a 
second time, conditioning said operation on said result (col. 5, lines 1-6). 
As per claims 12, 53, and 68: 

Tso et al. and Takahashi et al. substantially teach the method, system, and machine- 
readable medium of claims 1, 42, and 57. Furthermore, Tso et al. teach wherein said result 
includes at least one of: a time when said operation was performed, remedial measures taken in 
response to said operation, whether access was allowed in response to said operation (col. 5, 
lines 6-7). 

As per claims 14, 55, and 70: 

Tso et al. and Takahashi et al. substantially teach the method, system, and machine- 
readable medium of claims 1, 42, and 57. Furthermore, Tso et al. teach wherein said operation is 
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performed before allowing access to said object for requests including read access (col. 3, lines 
2-10). 

As per claims 1 5, 56, and 71 : 

Tso et al. and Takahashi et al. substantially teach the method, system, and machine- 
readable medium of claims 1, 42, and 57. Furthermore, Tso et al. teach wherein said operation is 
performed after allowing access to said object for requests including write access (col. 5, lines 6- 
13). 

As per claims 52 and 67: 

Tso et al. and Takahashi et al. substantially teach the system, and machine -readable 
medium of claims 42 and 57. Furthermore, Tso et al. teach wherein a second operation on said 
at least one of the set of objects is conditioned on the result (col. 5, lines 1-13). 
As per claims 72, 73, and 74: 

Tso et al. and Takahashi et al. substantially teach the method, apparatus, and machine- 
readable medium if claims 1, 42, and 57. Furthermore, Tso et al. teach wherein said processing 
comprises scanning (col. 2, line 66 - col. 3, line 5). 

III. Claims 2, 43, and 58 are rejected under 35 U.S.C. 103(a) as being unpatentable over Tso 
et al., US Patent No. 6,088,803 and Takahashi et al., European Patent App. No. 903901 A2, as 
applied to claims 1, 42, and 57 above and further in view of Ji et al., US Patent No. 5,623,600. 
As per claims 2, 43, and 58: 

Tso et al. and Takahashi et al. substantially teach a method, an apparatus, and 
memory/mass storage as in claims 1, 42, and 57. Not explicitly disclosed is including 
conditioning said operation on a feature of said object, said feature including at least one of: a 
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file name, a file type, a file-system share. However, Ji et al. teach that the file type of the 
requested file is taken into consideration for the scanning process. Therefore, it would have been 
obvious to a person in the art at the time the invention was made to modify the method disclosed 
in Tso et al. and Takahashi et al. to use the file type of the requested file in order to determine 
whether or not it is possible for that file to be a virus based on its extension. This modification 
would have been obvious because a person having ordinary skill in the art, at the time the 
invention was made, would have been motivated to do so since Ji et al. teach that if the file type 
of the requested file is not an executable then extra time should not be used to scan it in col. 7, 
lines 33-40. 

IV. Claims 3, 44, and 59 are rejected under 35 U.S.C. 103(a) as being unpatentable over Tso 
et al., US Patent No. 6,088,803 and Takahashi et al., European Patent App. No. 903901 A2, as 
applied to claims 1, 42, and 57 above and further in view of Ji et al., US Patent No. 5,623,600 
and Garrison, US Patent No. 6,275,939. 
As per claims 3, 44, and 59: 

Tso et al. and Takahashi et al. substantially teach a method, an apparatus, and 
memory/mass storage as in claims 1, 42, and 57. Not explicitly disclosed is including 
conditioning said operation on a feature of said object, said feature including at least one of: a 
file name, a file type, a file-system share. However, Ji et al. teach that the file type of the 
requested file is taken into consideration for the scanning process. Therefore, it would have been 
obvious to a person in the art at the time the invention was made to modify the method disclosed 
in Tso et al. and Takahashi et al. to use the file type of the requested file in order to determine 
whether or not it is possible for that file to be a virus based on its extension. This modification 
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would have been obvious because a person having ordinary skill in the art, at the time the 
invention was made, would have been motivated to do so since Ji et al. teach that if the file type 
of the requested file is not an executable then extra time should not be used to scan it in col. 7, 
lines 33-40. 

Also not explicitly disclosed is a type of access associated with said user request; wherein 
said operation is performed for an intersection of at least one of said feature and at least one type 
of access. However, Garrison teaches a type of access associated with said user request wherein 
said operation is performed for an intersection of at least one feature and at least one type of 
access. Therefore, it would have been obvious to a person in the art at the time the invention was 
made to modify the method disclosed in Tso et al. and Takahashi et al. to allow access based on 
the intersection of the file type of the requested file in order to determine whether or not it is 
possible for that file to be a virus based on its extension and the type of access associated with 
the user request. This modification would have been obvious because a person having ordinary 
skill in the art, at the time the invention was made, would have been motivated to do so since 
Garrison teaches using some type of codeword and the user's access rights in order to determine 
what information should be accessible to that user in col. 7, lines 33-67. 

V. Claims 8-10, 49-51, and 64-66 are rejected under 35 U.S.C. 103(a) as being unpatentable 
over Tso et al., US Patent No. 6,088,803 and Takahashi et al., European Patent App. No. 903901 
A2, as applied to claims 1, 42, and 57 above and further in view of Midgely et al., US Patent No. 
5,604,862. 

As per claims 8, 49, and 64: 
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Tso et al. and Takahashi et al. substantially teach the method, system, and machine- 
readable medium of claims 1, 42, and 57. Furthermore, Tso et al. teach setting a timeout at said 
server (col. 4, lines 8-17). Not explicitly disclosed is wherein said operation includes resetting 
said timeout in response to receiving a response from said cluster device to a protocol message 
asking if said cluster device is still working on said operation; and determining that said 
operation is successful in response to receiving a response from said cluster device before said 
timeout expires. However, Midgely et al. teach that if there is an unresponsive server, the replica 
takes over in order to respond with the data requested in order to show that the device is down. 
Therefore, it ^yould have been obvious to a person in the art at the time the invention was made 
to modify the method disclosed in Tso et al. and Takahashi et al. to use a timeout that will shows 
the device is down if it is not reset as working on the request. This modification would have been 
obvious because a person having ordinary skill in the art, at the time the invention was made, 
would have been motivated to do so since Midgely et al. suggest that using a reasonable timeout 
can be helpful in indicating various security issue once that timeout has expired in col. 5, lines 
23-45. 

As per claims 9, 50, and 65: 

Tso et al. and Takahashi et al. substantially teach the method, system, and machine- 
readable medium of claims 1, 42, and 57. Not explicitly disclosed is including assigning an 
access type to said cluster device, said access type allowing said cluster device to perform said 
operation notwithstanding user locks associated with said object. However, Midgely et al. teach 
the cluster device having a list that allows it access, but disallows user access at that time. 
Therefore, it would have been obvious to a person in the art at the time the invention was made 
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to modify the method disclosed in Tso et al. and Takahashi et al. to assign an access type to the 
cluster device, allowing the device to access the file. This modification would have been obvious 
because a person having ordinary skill in the art, at the time the invention was made, would have 
been motivated to do so since Midgely et al suggest that allowing the cluster device to perform 
its operations protects the integrity of the data objects in col. 6, lines 34-64. 
As per claims 1 0, 5 1 , and 66: 

Tso et al. and Takahashi et al. substantially teach the method, system, and machine- 
readable medium of claims 1, 42, and 57. Not explicitly disclosed is including restricting said 
access type in response to at least one of: a selected set of network addresses for said cluster 
device, a selected set of domain names for said cluster device, a selected set of user names at said 
cluster device, a selected set of interfaces between said server and said cluster device. However, 
Midgely et al. teach that access is restricted to a selected set of user names at the cluster device. 
Therefore, it would have been obvious to a person in the art at the time the invention was made 
to modify the method disclosed in Tso et al. and Takahashi et al. to further restrict the client's 
access to a selected set of user names at the cluster device in order to ensure that the requesting 
user is in fact authorized to access the particular file being requested. This modification would 
have been obvious because a person having ordinary skill in the art, at the time the invention was 
made, would have been motivated to do so since Midgely et al. suggest that restricting a client's 
access to a selected set of user names will add more security to the system so that unauthorized 
users are not able to access more than they are supposed to in col. 6, lines 42-64. 
VI. Claims 13, 54, and 69 are rejected under 35 U.S.C. 103(a) as being unpatentable over Tso 
et al., US Patent No. 6,088,803 and Takahashi et al., European Patent App. No. 903901 A2, as 
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applied to claims 1, 42, and 57 above and further in view of Garrison, US Patent No. 6,275,939. 
As per claims 13, 54, and 69: 

Tso et al. and Takahashi et al. substantially teach the method, system, and machine- 
readable medium of claims 1, 42, and 57. Not explicitly disclosed is including conditioning said 
operation on a type of access associated with said user request. However, Garrison teaches that a 
user's access rights are taken into consideration when a file is requested. Therefore, it would 
have been obvious to a person in the art at the time the invention was made to modify the method 
disclosed in Tso et al. and Takahashi et al. to further restrict the client's access to a selected set 
of user names at the cluster device in order to ensure that the requesting user is in fact authorized 
to access the particular file being requested. This modification would have been obvious because 
a person having ordinary skill in the art, at the time the invention was made, would have been 
motivated to do so since Garrison suggests that checking the user's status will ensure that 
unauthorized users cannot gain access to information they are not meant to see in col. 8, lines 1- 
5. 

* References Cited, Not Used 

The prior art made of record and not relied upon is considered pertinent to applicant's 
disclosure. 

1. US Patent No. 6,327,658 

2. US Patent No. 6,918,113 

3. US Patent No. 6,226,752 

The above references have been cited because they are relevant due to the manner in which the 
invention has been claimed. 
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Conclusion 



Applicants amendment necessitated the new ground(s) of rejection presented in this 
Office action. Accordingly, THIS ACTION IS MADE FINAL. See MPEP § 706.07(a). 
Applicant is reminded of the extension of time policy as set forth in 37 CFR 1.136(a). 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within TWO 
MONTHS of the mailing date of this final action and the advisory action is not mailed until after 
the end of the THREE-MONTH shortened statutory period, then the shortened statutory period 
will expire on the date the advisory action is mailed, and any extension fee pursuant to 37 
CFR 1.136(a) will be calculated from the mailing date of the advisory action. In no event, 
however, will the statutory period for reply expire later than SIX MONTHS from the date of this 
final action. 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Nadia Khoshnoodi whose telephone number is (571) 272-3825. 
The examiner can normally be reached on M-F: 8:00-4:30. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Emmanuel Moise can be reached on (571) 272-3865. The fax phone number for the 
organization where this application or proceeding is assigned is 703-872-9306. 




Nadia Khoshnoodi 
Examiner 
Art Unit 2137 
1/17/2007 
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